TI-2022-01624 CVE-2022-1758 · GHSA-654h-rpxx-5fcpGenki Pre-Publish Reminder <= 1.4.1 - Stored XSS & RCE via CSRFPriority LOW 39The Genki Pre-Publish Reminder WordPress plugin through 1.4.1 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack and lead to…CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00612 · Published 2022-06-13 · No fix listed CWE-352